Atty Docket No. ENI-048 
AMENDMENTS IN THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

LISTING OF THE CLAIMS: 

Claims 1-31: PREVIOUSLY CANCELLED 

Claims 32-40: PREVIOUSLY CANCELLED 

41 . (Currently amended) A method of controlling the usage by an attached function of 
network services associated with a network system that includes the attached function, one or 
more other attached functions and one or more network infrastructure devices, the method 
comprising the steps of: 

a. acquiring information about an attached function seeking access to the network 
services; 

b. associating a level of trust with the information about the attached function; 

c. granting to the attached function preliminary entry to the network system based 
upon the information acquired; 

d. determining whether a stored policy history exists for the attached function; 

e. if the stored policy history exists for the attached function, establishing in a 
network entry device or a central switching device of the network infrastructure 
connected to the attached function one or more static and dynamic policies for the 
attached function for network services usage based upon the stored policy history; 

f. if no stored policy history exists for the attached function, establishing for the 
attached function one or more static and dynamic policies for network services 
usage; 

g. monitoring the network system for triggers including triggers unrelated to the 
information acquired about the attached function; 

h. modifying in the network entry device or the central switching device one or more 
static and dynamic policies for the attached function upon the detection of one or 
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more of the monitored triggers, wherein the decision whether to modify is made at 
the network entry device or the central switching device; and 
i. saving set and modified policies associated with the attached function as the 

stored policy history for the attached function, 
wherein the attached function is connected directly to the network entry device or the 
central switching device and wherein a portion of the saved set and modified policies are 
stored on the network entry device or the central switching device to which the attached 
function is directly connected and a remainder of the saved set and modified policies are 
stored on another network infrastructure device to which the attached function is not 
directly connected. 

42. (Previously presented) The method as claimed in Claim 41 wherein the step of modifying 
for the attached function one or more of the static and dynamic policies is performed 
independent of any action of the attached function. 

43. (Previously presented) The method as claimed in Claim 41 wherein the step of modifying 
for the attached function one or more of the static and dynamic policies comprises the step of 
changing a static policy to a dynamic policy. 

44. (Previously presented) The method as claimed in Claim 41 wherein the step of modifying 
for the attached function one or more of the static and dynamic policies comprises the step of 
changing a dynamic policy to a static policy. 

45. (Previously presented) The method as claimed in Claim 41 wherein the static and dynamic 
policies relate to usage policies by the attached function of any network service and not solely 
ingress and egress to and from the network system by the attached function. 

46. (Previously presented) The method as claimed in Claim 41 wherein the step of modifying 
for the attached function one or more of the static and dynamic policies occurs per flow. 
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47. (Previously presented) The method as claimed in Claim 41 wherein the step of modifying 
for the attached function one or more of the static and dynamic policies occurs per session. 

48. CANCELLED. 

49. (Previously presented) The method as claimed in Claim 41 further comprising the step of 
establishing rules of hierarchy for saved set and modified policies. 

50. CANCELLED. 

51 . (Currently amended) The method as claimed in Claim 41 further comprising the step of 
overriding saved set and modified policies stored on the server an o ther network infrastructure 
device with saved set and modified policies stored on the network entry device or the central 
switching device. 

52. (Previously presented) The method as claimed in Claim 41 further comprising the step of 
invalidating the saved set and modified policies upon the occurrence of a specified event. 

53 . (Previously presented) The method as claimed in Claim 4 1 wherein the only static policy 
is that there are only dynamic policies. * 

54. (Currently amended) A method of controlling the usage by an attached function of 
network services associated with a network system that includes the attached function, one or 
more other attached functions and one or more network infrastructure devices, the method 
comprising the steps of: 

a. acquiring information about an attached function seeking access to the network 
services; 

b. granting to the attached function preliminary entry to the network system based 
upon the information acquired; 

c. establishing in a network entry device or central switching device of the one or 
more network infrastructure devices connected to the attached function one or 
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more static and dynamic policies for the attached function for network services 
usage; 

d. monitoring the network system for triggers including triggers unrelated to the 
information acquired about the attached function; 

e. modifying in the network entry device or the central switching device one or more 
of the static and dynamic policies for the attached function upon the detection of 
one or more of the monitored triggers, wherein the decision whether to modify is 
made at the network entry device or the central switching device; 

f. saving set and modified policies associated with the attached function as a stored 
policy history for the attached function, wherein the attached function is directly 
connected to the network entry device or the central switching device and wherein 
a portion of the saved set and modified policies are stored on the network entry 
device or the central switching device to which the attached function is directly 
connected and a remainder of the saved set and modified policies are stored on 
another network infrastructure device to which the attached function is not 
directly connected; and 

g. establishing rules of hierarchy for saved set and modified policies. 

55. (Previously presented) The method as claimed in Claim 54 wherein the step of modifying 
for the attached function one or more of the static and dynamic policies is performed 
independent of any action of the attached function. 

56. CANCELLED. 

57. (Currently amended) The method as claimed in Claim 54 further comprising the step of 
overriding saved set and modified policies stored on the s e rv e r another network infrastructure 
device with saved set and modified policies stored on the network entry device or the central 
switching device. 

58. (Previously presented) The method as claimed in Claim 54 further comprising the step of 
invalidating the saved set and modified policies upon the occurrence of a specified event. 
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